RUNNING PROJECTS UPCOMING PROJECTS

PKI R&D Lab Project

Establishment of CA Monitoring System (CAMS) and Security is a Project under the Office of the Controller of Certifying Authorities (CCA), Information & Communication Technology Division, Ministry of Posts, Telecommunications and ICT, People’s Republic of Bangladesh.

CCA has a number of initiatives to introduce latest developments in digital signature like e-Sign, Unique Identity Service, Central Repository service and so on. Hence, it is required to have a research lab at CCA office to test and enhance the Digital Certificate Portfolio as well as expand and reach the digital certificate domain. The lab will also do research to expand the usage of electronic signatures in various offices/sectors of the Government.

This Lab will also make research on-

1. Technology, Policy, Procedure and Guidelines of PKI,
2. Development of PKI tools in the CCA and provide support (human resource support) for
Research and Development on PKI and Electronic Signature.
3. Support to encourage the CAs for their own PKI related R&D innovation works and development


The PKI Lab will initially consist of One or Two rack-mounted servers and 10 workstations / Desktops divided amongst required distinct subnets and interconnected via a router, two switches and Firewall at back. The initial plan of work has been sub-divided into three (3) distinct phases to facilitate planning and deployment.

The CCA PKI Laboratory project is quite large and complex so the project plan has been sub-divided into seven distinct phases in order to implement our concept. The Seven phases are as follows:
Phase 1 – Acquisition, Base Configuration & Networking: All hardware and software will be acquired as part of Phase 1 so that subsequent phases can proceed without interruption. Phase 1 also includes configuration and networking components.
Phase 2 – PKI Configuration: This phase will involve the implementation and configuration of both the PKI and the directory software.
Phase 3 – Cross-Certification & Validation: Prior to cross-certification being able to occur the directories will need to be linked using either chaining or cross-references. This phase also includes the implementation and configuration of the Validation Authority.
Phase 4 - Test Application: Phase 4 includes implementing the messaging infrastructure.
Phase 5 - Detail work on the current system’s security and make it more secure to use all over the country.
Phase 6 - Research and Implement the E-signature process and make it secure and accurate to use the different Govt. concern Section like- NBR, Education Board Etc.
Phase 7 - Test the E-Signature Process on a specific section and find the issue for future implementation and arrange training to use the system to all the sectors in Bangladesh.

Expected benefits
Each project or any work we do is for any kind of benefit. In e-signature it also includes, there are multiple benefits behind this e-signature project. Especially government officials will have to do manual signature less, with the help of this system a document can be signed and verified by digitally which requires less printing cost as there is no requirement of printing. Detecting fraud documents is easier, multiple departments of the government can share signatures using this system which will be easier for government officials to work as well as for normal civilians. This project will not only benefit government officials or civilians, along with them it will enrich our country's R&D center, as this project requires an R&D center.

Procurement of SIEM and WAP (Web Application Protocol Under The Establishment of CA Monitoring System (CAMS) and Security Project

About the project-
Establishment of CA Monitoring System (CAMS) and Security is a Project under the Office of the Controller of Certifying Authorities (CCA), Information & Communication Technology Division, Ministry of Posts, Telecommunications and ICT, People’s Republic of Bangladesh. Security information and event management (SIEM) is a vital part of cyber defense strategies. his is due to the need to manage the network and have a wide understanding of all the events that happen within. When the cyber security team has this understanding then it becomes easy to notice irregularities within network traffic, therefore becomes easier to pinpoint threats.

Expected benefits
One of the largest roll out of SIEM in country giving the benefits of Splunk SIEM which combines patterns, machine learning and threat intelligence to verify all instances within a network. It offers greater scalability to help with network monitoring and works easily with other tools to improve defenses. This combination provides real-time security monitoring, allowing teams to track and analyze events and maintain security data logs for auditing and compliance purposes. In addition with the 24/7 SOC support it assists achieving–
Streamline compliance reporting
Detect the undetected
Improve the efficiency of incident handling activities

SOC Center Consultancy & VAPT Service Outsourcing

One of prestigious upcoming projects to roll out in international platform under a three tier data center project.

Building a security operation center SCSL will perform: • Assessing Security Operations Capabilities.
• Defining the SOC strategy.
• Designing the SOC Infrastructure.
• Building the SOC services.
• Preparing the 24/7 SOC services for the start.

In addition with the 24/7 SOC support it assists achieving–
- Streamline compliance reporting
- Detect the undetected
- Improve the efficiency of incident handling activities
- Perform VAPT service

SCSL will deploy -
• People.
• Process.
• Technology.